686 Photos and videos
I have archived this account after the new management changes that are very unpleasant.
Please find me somewhere else through my blog👇, @Rob_Bos@mstdn.social or LinkedIn: LinkedIn.com/in/bosrob
1
411
Very insightful post on attacking Source Control Management systems (SCM)!
medium.com/boostsecurity/sls…
199
Interesting read!
medium.com/bondora-engineeri…
1
3
166
The GitHub Silverware Drawer Dilemma, Or: Finding Active Repository Forks | Hackaday hackaday.com/2023/01/08/the-…
87
I scanned every package on PyPi and found 57 live AWS keys tomforb.es/i-scanned-every-p…
1
146
Devs urged to rotate secrets after CircleCI suffers security breach | The Daily Swig portswigger.net/daily-swig/d…
1
132
10 software supply chain attacks you can learn from reversinglabs.com/blog/10-su…
1
68
My best viewed blogposts created in 2022: Number 1 devopsjournal.io/blog/2022/0…
Explaining the different types of GitHub Access Tokens you can use to get access to GitHub
83
My top blogposts created in 2022: Number 2 devopsjournal.io/blog/2022/0…
Only created in August, but now my best viewed post on a monthly basis! Six reasons of why you workflow did not start and how to check them!
75
My top blogposts created in 2022: Number 3 devopsjournal.io/blog/2022/0…
About a much asked for approach to cleanup the notifications on GitHub
85
My top blogposts created in 2022: Number 4 devopsjournal.io/blog/2022/0…
About scanning the entire! GitHub Actions Marketplace for security issues in their dependencies!
80
My top blogposts created in 2022: Number 5 devopsjournal.io/blog/2022/0…
About detecting usage of the camera in Windows and triggering my Home Automation setup for that!
73
My top blogposts created in 2022: Number 6: devopsjournal.io/blog/2022/0…
My take on how I create a GitHub Action and where I start.
1
93
My top blogposts created in 2022: Number 7: Configuration as Code for the GitHub platform. There are lots of posts talking about this, but few with an actual implementation. I create one for inviting users and creating repos for them.
Read it here:
devopsjournal.io/blog/2022/0…
1
127
Finding the next Log4j – OpenSSF’s Brian Behlendorf on pivoting to a ‘risk-centred view’ of open source development. portswigger.net/daily-swig/f…
100
So... I have enabled actionlint on 3 repos today, and fixed 2 workflows that had vulnerabilities or errors in them. And I am educating people on using GitHub Actions in a safe way for a couple of years now!
ActionLint: github.com/rhysd/actionlint/
#BeSaferPeople #DevOps #GitHub
1
120
New blogpost! Adding the OSSF scorecard action to your repository:
devopsjournal.io/blog/2022/1…
This can help you improve the security in your repository, with actionable alerts (and super easy fixes for some!).
These numbers are scary! (On the other hand: I will always have a job!).
Culture a Stumbling Block to DevOps, DevSecOps devops-com.cdn.ampproject.or…
Dependabot now supports security updates for Dart and Flutter apps that use Pub packages github.blog/changelog/2022-1…
1
2